Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/tWKnKMFerAusOS1JAWU6uUIhTho.roa
File: tWKnKMFerAusOS1JAWU6uUIhTho.roa (raw, json)
Hash identifier: VwD44JvIdG/SyYU6SAHH7ZWZpP2zu9bR8oEp132270A=
Subject key identifier: B5:62:A7:28:C1:5E:AC:0B:AC:39:2D:49:01:65:3A:B9:42:21:4E:1A
Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Certificate serial: 018E7AFA424F59E0E6EA787E8C54D225F4F4
Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/tWKnKMFerAusOS1JAWU6uUIhTho.roa
Signing time: Tue 26 Mar 2024 13:36:45 +0000
ROA not before: Tue 26 Mar 2024 13:36:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 138968
IP address blocks: 103.76.85.0/24 maxlen: 24
103.76.87.0/24 maxlen: 24
116.206.92.0/22 maxlen: 24
2a0f:6700::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:7a:fa:42:4f:59:e0:e6:ea:78:7e:8c:54:d2:25:f4:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Validity
Not Before: Mar 26 13:36:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b562a728c15eac0bac392d4901653ab942214e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:16:cd:ff:fa:b9:5f:54:44:09:b1:af:bf:dc:
9b:33:9f:3a:90:c3:1d:92:29:7b:f8:01:58:00:c1:
fc:04:b2:f6:5b:41:8b:47:61:24:34:d4:82:c4:51:
31:5c:c3:ae:5c:37:07:5c:fd:fd:6c:eb:bb:29:c2:
49:c0:b9:9b:13:ea:8b:60:5f:55:83:7d:1a:ab:b3:
d7:be:66:91:95:8b:7d:18:63:b6:61:8d:78:65:48:
4c:61:50:af:51:0a:70:d7:15:de:ad:8d:ca:ba:e5:
0c:08:4c:d5:23:09:4b:e3:d6:a5:57:6b:c0:42:1b:
fd:1b:31:c2:26:c8:ca:dd:3b:90:87:74:a4:6f:17:
99:57:05:5e:cb:62:1a:48:f6:83:cf:9b:4c:f3:45:
90:bd:8c:0a:e9:8e:27:21:62:5c:64:cf:fc:89:65:
da:80:35:9d:ae:17:74:64:85:d7:73:1e:f9:e5:03:
65:b1:35:ed:92:f8:c7:14:36:3b:ab:dd:74:f8:a3:
06:e1:c9:cc:f8:fa:46:c0:1c:63:c1:93:bc:6b:9e:
e5:e9:3e:e2:6e:b5:f6:9c:16:0c:33:a3:ad:61:f2:
38:19:c4:07:78:13:8c:11:24:7d:d9:f3:1d:09:ff:
cf:3f:9e:c6:e1:dd:29:27:93:62:a0:4f:27:d0:0d:
4a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:62:A7:28:C1:5E:AC:0B:AC:39:2D:49:01:65:3A:B9:42:21:4E:1A
X509v3 Authority Key Identifier:
keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/tWKnKMFerAusOS1JAWU6uUIhTho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.76.85.0/24
103.76.87.0/24
116.206.92.0/22
IPv6:
2a0f:6700::/29
Signature Algorithm: sha256WithRSAEncryption
06:2c:91:12:21:b9:91:9e:7e:9a:42:4f:23:40:0b:2d:be:a6:
47:50:5d:a4:28:a3:d3:a0:23:13:db:f5:cd:56:e0:74:a8:d8:
62:60:b0:41:c7:e1:da:8a:63:2d:a7:8e:3e:7d:ec:9f:97:d3:
71:3a:df:db:a3:0d:ca:25:42:81:65:4f:ea:de:7e:8e:6b:7f:
50:49:18:74:dc:d1:96:22:a2:d7:8b:76:90:e0:68:83:a8:a0:
b4:44:9c:17:08:83:ac:76:f5:7c:e7:45:d4:19:85:f2:2d:0b:
ea:c1:ea:5e:dc:8a:fb:2e:32:9d:9a:c4:9c:c2:9f:a9:14:dc:
c7:36:21:f2:39:1f:b1:69:b6:50:ff:92:5d:52:28:85:18:bc:
5d:d2:a8:ee:46:81:3e:88:b1:87:26:6c:f8:b7:c3:60:2b:94:
41:c9:9c:8f:8f:29:e3:9c:49:51:92:82:ef:25:44:c8:8d:b7:
13:3a:43:8b:7d:15:0a:13:c1:e4:54:af:35:e8:b6:29:69:5d:
2d:b0:79:dc:ca:6a:c3:86:06:72:87:99:a0:23:f5:63:33:9f:
cb:03:c0:50:54:f8:e4:e7:9e:c8:af:d9:9e:c3:4f:b8:53:9f:
7d:ea:f4:82:e8:cc:16:a1:c1:f5:63:b9:33:15:9e:e6:10:fc:
5b:8e:23:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 03:10:38 2024 by rpki-client on console-ams.rpki-client.org